On October 5, 2026, Atlassian announced that 8 products, including Jira and Confluence, have a vulnerability that allows ...

Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted Data Center products, including ...

A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication.

The 9.3-rated vulnerability lets unauthenticated attackers access specific files outside their intended boundaries. Atlassian is calling for immediate patching.

Attackers are exploiting an Atlassian Data Center flaw that enables unauthenticated access to specific webroot files.